kernel: add a LOCK_SYSINIT helper macro